Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File:                     vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier:          ROmqB/sMOLwlxfzotlIvFqmzL3BKUz9RNhfGo5vaI/c=
Subject key identifier:   20:08:11:B9:26:D9:BE:82:AE:28:96:E6:94:0A:A1:98:63:EE:90:DA
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer:       /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial:       01A10813966ED3ECBC0F3A2C550288656721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number:          1A8B
Signing time:             Sun 04 Oct 2026 18:01:03 +0000
Manifest this update:     Sun 04 Oct 2026 18:01:03 +0000
Manifest next update:     Mon 05 Oct 2026 18:01:03 +0000
Files and hashes:         1: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (hash: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw=)
                          2: KiCQzmzMp-dYZTZsdnHQ8YtB-c8.roa (hash: qCTJ0Z0ss61tBjs7gfwTEQIH5p2Cgv1rvo+LUOzgJYU=)
                          3: nl0QqxYkhrgEnGSiBIyps1pAWH0.roa (hash: UJJM3FmfgAAIVk6G6ixYjeSBmXhQkoUQYqScG+rKsI4=)
                          4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: /ByCvqzhS1SJ1HuxkGavxMCDE4hKcbwCwIPPBR8j49M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:13:96:6e:d3:ec:bc:0f:3a:2c:55:02:88:65:67:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
        Validity
            Not Before: Oct  4 18:01:03 2026 GMT
            Not After : Oct  5 18:01:03 2026 GMT
        Subject: CN=200811b926d9be82ae2896e6940aa19863ee90da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a3:1f:17:d4:db:96:69:28:a9:c5:34:27:85:
                    f5:9d:f7:cf:7a:49:9e:c2:60:d9:83:f1:99:15:c8:
                    cb:1a:ee:2e:c3:af:af:5f:1e:4b:ba:0a:5f:f0:37:
                    e5:48:06:5f:0e:56:8a:4b:30:1f:84:38:51:99:b3:
                    b9:e1:01:8a:5d:3e:26:df:d9:dd:67:89:b8:56:da:
                    9c:11:79:13:35:06:4d:47:6a:68:0b:b2:ea:c6:9d:
                    ef:25:9b:50:86:8c:15:12:1d:4d:ca:4f:7d:bc:7d:
                    52:a8:6e:e6:9b:8d:e5:de:cf:95:e1:38:d6:74:1e:
                    66:df:61:3e:b5:56:1f:d2:94:bc:78:69:02:aa:c0:
                    9a:40:77:08:4e:7f:d2:41:23:4f:21:a4:d6:28:f3:
                    a9:cd:0f:b7:ba:73:b1:3e:f5:d4:e4:26:b2:67:d4:
                    fb:b2:b7:f0:47:62:93:76:4d:c3:32:57:0e:18:12:
                    b3:6a:ee:21:cd:15:6a:6a:35:71:a6:f6:f7:69:4d:
                    fa:8b:99:5e:49:b6:ec:40:1d:ae:a9:a8:a5:c5:fe:
                    a5:ba:b4:7f:47:2d:9f:2f:cf:82:33:db:4e:68:53:
                    38:d1:01:b3:3f:23:da:6c:f6:98:b2:cd:51:48:1f:
                    bc:5b:3d:c1:a8:79:df:82:0a:cd:4d:1c:97:57:b4:
                    ee:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:08:11:B9:26:D9:BE:82:AE:28:96:E6:94:0A:A1:98:63:EE:90:DA
            X509v3 Authority Key Identifier:
                keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8e:23:31:92:cd:ab:c8:fc:df:94:e9:5e:2f:22:19:28:bc:
         47:c3:a3:4f:96:7f:a8:a2:38:18:2f:46:05:e8:70:a5:b9:66:
         61:9a:66:fe:54:9c:0a:3d:ba:e4:3c:8b:57:45:2a:cb:83:b1:
         0d:3d:90:07:a3:2c:df:be:f8:3d:a0:56:8d:fc:b1:89:75:bd:
         ff:fd:d1:6c:d8:ed:f2:ec:b4:b4:c6:41:c4:18:30:13:29:70:
         7c:77:d6:fe:63:88:0e:45:7c:2b:ad:dc:dd:27:e9:38:13:5b:
         33:74:68:fa:93:36:f4:7f:fa:de:12:93:2a:fc:08:b0:f3:ab:
         9f:e7:37:af:e0:69:a6:5a:f8:96:48:c2:d0:77:99:e8:b6:19:
         a0:86:fb:95:72:72:5d:54:87:b5:f6:dd:be:50:02:33:d5:04:
         20:d7:53:fd:ac:ca:05:f3:a3:87:15:1e:62:82:2d:cb:76:94:
         89:d8:b5:a8:b2:29:d1:c2:82:ce:9f:9c:63:d3:5a:b0:c8:0e:
         22:65:eb:13:0d:31:76:b3:66:b2:68:d0:a9:9c:42:1f:4f:92:
         09:1c:65:b4:fd:52:12:65:71:1d:19:17:51:8c:9f:98:cc:03:
         2a:0e:64:28:9b:65:9a:4a:80:aa:0d:03:ed:da:42:3c:a2:de:
         9a:ae:8d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:49:59 2026 by rpki-client